The vendor operational reliance level is determined by your organization and can be marked by low-risk, medium-risk, and high-risk.
For Operational reliance, here is some guidance on which level to choose:
Low: This vendor can be easily substituted for an alternative vendor with low effort required. If the vendor's product or service were to go down, an alternative product or service could be quickly procured, implemented, or enabled to support business operations.
Medium: The ability to substitute to an alternative vendor requires moderate effort due to current reliance on the existing vendor's product or service. While inconvenient, your business could still operate as you look to procure or switch to alternative solutions
High: The ability to substitute to an alternative vendor is very burdensome and complex, as your organization is highly integrated with the vendor's product or service. If the vendor's product or service were to go down, there would be a significant impact on the ability to conduct business operations.